Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-64507— Incus vulnerable to local privilege escalation through custom storage volumes

Quick assessment

Affected
lxc incus
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Incus是LXC开源的一个系统容器和虚拟机管理器。 Incus 6.0.6之前版本和6.19.0之前版本存在安全漏洞，该漏洞源于未正确限制自定义存储卷的权限，可能导致权限提升。

AI Predicted 8.1 Difficulty: Moderate EPSS 0.17% · P5
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-64507

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Incus vulnerable to local privilege escalation through custom storage volumes
Source: CVE Program / CVE List V5
Vulnerability Description
Incus is a system container and virtual machine manager. An issue in versions prior to 6.0.6 and 6.19.0 affects any Incus user in an environment where an unprivileged user may have root access to a container with an attached custom storage volume that has the `security.shifted` property set to `true` as well as access to the host as an unprivileged user. The most common case for this would be systems using `incus-user` with the less privileged `incus` group to provide unprivileged users with an isolated restricted access to Incus. Such users may be able to create a custom storage volume with the necessary property (depending on kernel and filesystem support) and can then write a setuid binary from within the container which can be executed as an unprivileged user on the host to gain root privileges. A patch for this issue is expected in versions 6.0.6 and 6.19.0. As a workaround, permissions can be manually restricted until a patched version of Incus is deployed.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
特权管理不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
Incus 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Incus是LXC开源的一个系统容器和虚拟机管理器。 Incus 6.0.6之前版本和6.19.0之前版本存在安全漏洞，该漏洞源于未正确限制自定义存储卷的权限，可能导致权限提升。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
lxc incus < 6.0.6 -

II. Public POCs for CVE-2025-64507

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-64507

请登录查看更多情报信息。

IV. Related Vulnerabilities

Same product: incus
Same vendor: lxc
Same weakness: CWE-269

V. Comments for CVE-2025-64507

No comments yet

Leave a comment